Layered Distribution

10 thoughts
last posted Sept. 8, 2012, 7:16 a.m.

7 earlier thoughts

0

This all means that there will never be "one packaging system to rule them all". From a social perspective, there needs to be recognition that dependency bundling isn't inherently evil, it merely shifts the responsibility for providing prompt security updates when vulnerabilities are found in those dependencies to the application vendor.

From a technical perspective, packaging systems would ideally be designed such that they can play host to other packaging systems and also be hosted on other packaging systems. Much of the current effort in Python packaging relates to moving to a system that isn't driven by a Python script, but instead by static configuration data. This static data should then be more amenable to automatic translation into other packaging formats.

2 later thoughts